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(54) Programmable two-level packet fitter 

(57) A filter used in a CATV or satellite broadcasting 
system to filter conditional access messages from PID 
streams. The fitter is programmable and is designed to 
be implemented as part of a standard architecture for 
receivers, The filter's programrnabilrty permits the filter 
to be easily adapted to accommodate proprietary condi- 
tional access systems. Programs for the filter are stored 
in the "smart card" used to personalize the receiver and 
downloaded to the filter. The filter has two levels The 
first level is a packet selection filter which selects mes- 
sages of interest to the receiver. The second level is a 
message reading filter which scans messages selected 
by the first level for contents that are of interest to the 

PD 



receiver. The scanned contents are output to the smart 
card, which uses them as required by the conditional 
access system. Programs for the filter's first level define 
the part of a message to be tested by the filter, the filter 
that the part to be tested is matched with, and whether 
a matching or non-matching message is to be passed to 
the second level. Programs for the second level define 
which parts of the packet are to be scanned and output 
to the smart card. The scanning can be conditioned on 
the contents of the message. In one embodiment, the 
first level of the filter is implemented in an ASIC and the 
second level is implemented using the receiver's micro- 
processor. 
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Description 

Background of the Invention 

5 1 . Field of the Invention 

The invention concerns packet filtering generally and more specifically concerns filtering packets used by condi- 
tional access systems in packet broadcast systems. The receivers in packet broadcast systems use the information 
contained in the conditional access packets to limit access to streams of encrypted packets received in the receivers. 
w The encrypted packets typically represent audio-video programs. 

2. Description of Related Art: FIG. 1 

The following discussion first describes the packet stream to be filtered and then a prior-art f Dtering arrangement. 

15 

The Packet Stream - ~ ^ 

FIG. 1 shows a prior-art system 101 for granting concStional access to a stream of transport packets 107 containing 
audio and visual information. FIG. 1 is a somewhat simplified version of FIG. 3 from U.S. patent 5,619,501 , G. Tamer et 

20 al., Conditional Access Filter as for a Packet Video Signal Inverse Transport System, issued April 8, 1997. The transport 
packets 107 are carried in one of a number of channels 105(0..n). Each channel carries transport packets belonging to 
a number of different sequences of such packets 107. The information in the transport packets of each of the 
sequences has a different function in the program; some of the information, for example, represents the audio and video 
for the program; other of the information is conditional access information, that is, information that is used to control 

25 access to the audio and video to those who have paid for the program. All of the transport packets 107 in each 
sequence have the same packer identifier (PID) 123. The packets in such a sequence will be termed in the following a 
PID stream; in FIG. 1, there are rm-7 PID streams. The information in each PID stream makes up a sequence of mes- 
sage packets 1 08. Each message packet has its own message packet header 1 09 which identifies the kind of message 
packet 108 and a payioad 111. There is no fixed mapping between message packets 108 and transport packets 107 in 

30 a PID stream. A message packet may be contained in a single transport packet or may extend over a number of trans- 
port packets. 

In the present context, we are primarily interested in message packets 108 which carry conditional access informa- 
tion. Such conditional access message packets 108 fall into two main categories: entitlement management messages 
or EM Ms, which provide information defining entitlements to pro-ams to receivers, and entitlement control messages 

35 or ECMs, which are broadcast with the pro-am and which contain the information that a receiver uses together with 
the information received in the EMMs to determine whether the receiver has access to a program and to provide the 
access if the receiver is entitled to it As would be expected from the foregoing, an EMM payioad 115 has two main com- 
ponents, the address 1 1 7 of the receiver which is to receive the entitlement and the entitiemerrt itself, which appears as 
user entitlement information 119. In system 101, the ECM is broadcast to a group of receivers and contains a group 

40 address (GADDR) 122; additionally, it contains system entitlement information 123, which indicates what entitlement 
information is required for a receiver to receive the program, ft the receiver has the required entitlement information, it 
is permitted to receive the PID streams that contain the audio and visual signals for the program. 

In order to bar unauthorized access to the program, the audio and video information is encrypted. Control word 1 25 
in the ECM is combined with decryption information from the entitlement information to produce a key that can be used 

45 to decrypt the encrypted audio and video signals. A PID stream of ECMs accompanies the PID stream of transport 
packets that contain the audio and video for the program. The key(s) used to encrypt the PID streams that contain the 
audio and video is changed every few seconds; synchronization between the key(s) used to encrypt the audio and 
video and the key(s) used to decrypt them is maintained by means of control word 125 in the ECM, which is changed 
as the encrypting key changes and is used in the receiver to derive the new key. Thus, a control word in a given ECM 

so is good for at most a few seconds. EMMs and ECMs have different filtering problems; with EMMs, a given PID stream 
may contain EMMs addressed to many different receivers; the filter must be able to rapidly distinguish between the few 
which are intended for the receiver the filter belongs to and the many which are not intended for the receiver. With 
ECMs, the problem is to fitter and process code word 1 25 rapidly enough so that the key used to decrypt the audio and 
video stays in synchronization with the key used to encrypt the audio and video. 

55 ' 

The Filtering Apparatus 

The remainder of FIG. 1 shows filtering apparatus 101 in the receiver which receives the packet stream. The 
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receiver is often what is termed a "set-top box", i.e., a box which connects a television set to a transmission medium 
such as a CATV cable or a satellite broadcast and converts what it receives via the transmission medium to audio and 
video signals suitable for a television set. The receiver may however also be simply a component of a television or radio 
receiver or of a personal computer or other workstation. 

5 Filtering apparatus 101 operates generally under control of microprocessor 159, with information from message 
packets 109 being transferred among components by memory control 158. Memory control 158 receives message 
packets 108 from decrypter 141 . If the packets contain audio or video information, memory control 158 routes the pack- 
ets via memory bus 169 to buffers (not shown) for this kind of information. Decoders then decode the contents of the 
packets to produce audio and video signals. If the packets contain access control information, they are routed to smart 

10 card 151. Smart card 151 is what is termed in the conditional access arts a secure e/emenf. Smart card 151 is used to 
store conditional access information such as decryption keys and entitlement information. Smart card 151 contains a 
processor and memory. The memory is addressable only by the smart card's processor and both the processor and 
memory have tamper-proof packaging which renders the smart card inoperable and its contents unreadable if a user of 
the set-top box attempts to tamper with the smart card. The secure element may be a built-in component of a receiver; 

75 however in many set-top boxes, the smart card is, as indicated by its name, a user-installable module which is pro- 
grammed with information particular to the user. The user "personalizes" his set-top box by inserting the smart card into 
the set-top box. 

Filtering apparatus 101 works as follows. Transport packets 107 are transmitted to the receiver by a transmission 
medium 1 03, which may be wired, as in a typical CATV system, or wireless, as in a satellite TV system. The user of the 

20 set top box selects a program. Packets 107 for the program will be broadcast on a channel 105, and microprocessor 
159 contains information which relates the program to a channel and toasetof PIDs 123 for packets that will be sent 
on the channel. Microprocessor 159 sets channel selector 1 27 as indicated by arrow 1 29 to receive the proper channel 
and sets PID selector 139 to select transport packets 107 having the PIDs 123 for packets belonging to the program. 
Having been set to the proper channel, channel selector 1 27 then receives the transport packets 1 07 being carried 

25 in the channel and provides them to error corrector 133, which corrects errors that may have occurred in transmission. 
Next the transport packets 107 go simultaneously to PID select 137 and decrypter 141. If the packet 107 does not 
belong to a PID for the selected program, PID select 137 signals decrypter 141 as shown by arrow 139 and decrypter 
141 responds to the signal by discarding the packet 107. Otherwise, the message packets 108 being carried in the 
transport packets 1 07 whose PIDS indicate that they belong to the program carry flags which indicate whether they are 

30 to be decrypted. Decrypter 141 simply passes message packets 108 through that are not to be decrypted; otherwise, 
it decrypts the message packet using a key provided by smart card 151, as indicated by arrow 153. Smart card 151 pro- 
vides the key if the entitlement information contained in the card indicates that the user of the set top box is entitled to 
view the pro-am. 

Unencrypted message packets 108 contain either EMMs or ECMs. These are filtered by filter 145, which matches 

35 the addresses 117 in the EMMs with the address off the receiver; if the addresses do not match, the message packet 
1 08 is discarded; otherwise fitter 145 provides the message packet 108 to memory control 158, which in turn provides 
it via memory bus 169 to smart card 151. In system 101, ECMs are addressed to groups of receivers, and the ECMs 
are filtered by titer 145 and provided to smart card 151 in the same fashion as described for EMMs. The processor in 
smart card 151 then applies the system entitlement information in ECM payload 121 to the user entitlement information 

40 received via EMMs addressed to the receiver, and if the result indicates that the receiver is entitled to receive the pro- 
gram, the processor outputs a key made with control word 1 25 to decrypter 1 41 , which uses it to decrypt the message 
packets 1 08 containing the audio and video information. Addresses to be matched in fffter 1 45 are loaded into filter 1 45 
by microprocessor 159 and/or smart card 151 . 

While systems such as that shown in FIG. 101 are effective to filter packets, they do have an important drawback: 

45 until now, conditional access systems and the fftters connected with them have been completely proprietary to the mak- 
ers of CATV or satellite TV broadcast equipment It was up to the maker to determine what conditional access informa- 
tion would be contained in an EMM or ECM and where the conditional access information was located in the EMM or 
ECM, and having made that determination, the maker designed his receivers to filter only EMMs and ECMs having the 
maker's formats. The proprietary nature of filtering in system 101 is indicated by the box 157 labeled "proprietary filter 

so system" that surrounds fitter 1 45 and smart card 1 51 in FIG. 1 . Because the filtering was proprietary, what set-top box 
an individual subscriber used depended on what kind of hardware his CATV or satellite broadcasting provider used. 
One consequence of this situation was that one had to have a set-top box for each provider; another was that changing 
providers generally meant getting a new set-top box. 

While this situation is tolerable where the set-top box is a separate component or where the local provider has a 

55 monopoly, it becomes intolerable when the components that perform the functions of the set-top box are built into a TV 
or computer work station or when there is no longer a monopoly. Other disadvantages of proprietary set-top boxes are 
that they fragment the market for set-top boxes and prevent the price reductions that are typical of markets for products 
such as PCS where there is a standard non-proprietary architecture and that the CATV or satellite broadcasting pro- 
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vider is generally limited to set-top boxes produced by the maker of his transmission equipment. On the other hand, pro- 
prietary conditional access features are an important area of differentiation for CATV or satellite broadcasting providers. 
What is needed, then, is an arrangement for filtering conditional access information which does not require proprietary 
hardware and at the same time permits the CATV or satellite broadcasting provider to provide proprietary conditional 
5 access features, ft is an object of the invention disclosed herein to provide such an arrangement 

Summary of the Invention 

The object of the invention is attained by a programmable two-level filtering apparatus. Because the filtering appa- 
w ratus is programmable, proprietary conditional access systems can be implemented on standard access control hard- 
ware and because there are two levels of f itering, conditional access information of any degree of complexity can be 
filtered. The first level of the filter is a packet selection fitter that selects packets that are of interest to the conditional 
access system from a PID stream; the second level of the filter is a packet reading filter reads predetermined portions 
of the packets and provides them to the concfitionaJ access system. 
15 The filtering apparatus may filter according to more than one filtering program. A given filtering program must have 
— a single packet reading fitter but may have a number of packet selection filters. A program for a packet selection fitter 
specifies a location in a packet where a match is to be looked for, matching data, a mask for the matching data, and 
whether to save the packet in response to a match or a lack of a match. A program for a packet reading filter specifies 
how a packet selected by the packet selection filter is to be scanned for data and what is to be done with the data 
20 located by the scan. In one embodiment of the invention, the fitter programs are contained in the smart card used to 
store entitlement information. 

The foregoing and other objects and advantages of the invention will be apparent to those skilled in the arts to 
which the invention pertains upon perusal of the following Detailed Description and drawing, wherein: 

26 Brief Description of the Drawing 

FIG. 1 is a block diagram of a prior-art packet filter system; 

FIG. 2 is a block diagram of a packet filter system incorporating the principles of the invention; 
FIG. 3 is a diagram of an ECM in a preferred embodiment; 
30 RG. 4 is a diagram of an EMM in the preferred embodiment; 

FIG. 5 shows the structure of a filter program file in the preferred embodiment; 
FIG. 6 is a table of fitter program types employed in the preferred embodiment; 
RG. 7 shows a packet selection filter descriptor in the preferred embodiment; 

FIG. 8A shows a first portion of the operations which may be employed in a packet reading fitter in the preferred 
35 embodiment; 

RG. 8B shows a second portion of the operations which may be employed in a packet reacOng fitter; 
FIG. 9 defines certain terms employed in FIGs. 8A and 8B; 
FIG. 10 shows an implementation of the programmable packet selection filter; 
RG. 1 1 shows a packet reading fftter descriptor in a preferred embodiment; and 
40 RG. 1 2 shows an implementation of the programmable packet reading filter. 

The reference numbers in the drawings have at least three digits. The two rightmost digits are reference numbers 
within a figure; the digits to the left of those digits are the number of the figure in which the item identified by the refer- 
ence number first appears. For example, an item with reference number 203 first appears in FIG. 2. 

45 

Detailed Description 

The following Detailed Description will first present an overview of the invention, will then present a detailed spec- 
ification of the invention, and will then present embodiments of the fitters of the invention. 

so 

Overview of the Invention: FIG. 2 

FIG. 2 shows a filtering system 201 that permits proprietary conditional access systems to be implemented using 
generic filtering hardware. The components of f Storing system 201 correspond generally to PID select 137 and propri- 
55 etary fitter system 157 of FIG. 1 . In distinction to proprietary fitter system 157, however, filtering system 201 has two 
levels of filtration and both levels are programmable The programs for the fitters are stored in smart card 225. The first 
level of filtering selects message packets 1 08 from among the message packets 108 contained in the transport packets 
107 having the same PID 123(0- The second level of tittering receives the packets selected by the first level and scans 
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them as determined by a program. In scanning, the second level outputs the information from the packet that is required 
for smart card 225 to perform its conditional access functions to the smart card. 

Continuing in more detail, the stream of transport packets 107 being transmitted in a channel 105(1) is received 
from EC 133 and is input to demultiplexer 203, which sorts the transport packets by PID 123 to produce a plurality of 

s PID streams 204 of transport packets 107. All of the transport packets 107 in a given PID stream 204 have the same 
PID 123Q*). PID streams containing audio and video data go to the decrypter, as shown at 215, bypassing filter 201. PID 
streams with packets that contain conditional access information go to filters in packet selection filters 205. The filters 
are programmed according to whether they are to filter EM Ms, ECMs, or packets containing other conditional access 
information which is private to a satellite TV or CATV program provider. 

io As set forth in the Description of Related Art. filtering of EMMs is primarily a matter of distinguishing the relatively 
small number of EMMs addressed to the receiver that contains the filter from the EMMs addressed to all the other 
receivers receiving packets broadcast on the channel. Thus, for EMMs, packet selection fitters 205 contains an address 
filter 209 for each PID stream that carries EMMs. The form of address filter 209 is of course dependent on the structure 
of receiver addresses in the satellite TV or CATV system in which the receiver is used and the location of the addresses 

is in the EMM. 

With ECMs, filtering aft the level of ffters 205 is primarily a matter of detecting when control word 1 25 has changed, 
necessitating recomputation of the decryption key by smart card 225. Such filtering can be done by saving a part of the 
ECM that changes when the control word changes and using that part in selection fitter 21 1 to select ECMs. That part 
is termed in the following a selection field. As long as the value of the selection field in the current ECM matches the 

20 value in selection filter 21 1 , there is no need for smart card 225 to consider the contents of the ECM. When the value 
in filter 21 1 no longer matches the selection field in the current ECM, the current ECM is carrying a new control word. 
The new control word must be provided to the decrypter and the value of the selection field from the current ECM must 
be put in selection fitter 21 1, and to do this, information from the ECM that has the new value of the selection field must 
be passed to smart card 225. A program may use a single key to decrypt both audio and video information, in which 

25 case there will be only one PID stream 204 of ECMs to filter; in other cases, there may be separate control words for 
different components of the broadcast In these cases, there may be several ECM PID streams, with a filter 211 for each 
ECM PID stream. With private conditional access information, what must be filtered will depend completely on how the 
information is used in the conditional access system, and fitter 21 3 for such information will depend on the information. 
When a filter in packet selection titers 205 has selected a message packet 108 for further consideration, it passes 

30 the message packet to packet reading filters 207. The filters in packet reading filters 207 are programmed to scan the 
packet to locate information that is of interest to smart card 225 and pass the information to smart card 225. The scan- 
ning can of course be conditioned on the type of packet 1 08 being read. In the case of the EMMs, there is only one EMM 
reader 217 for all of the EMM address fOters 209. The reason for this is that only a very few of the EMMs will be 
addressed to the receiver, and only those EMMs need be scanned by EMM reader 217. Consequently, a single EMM 

35 reader 21 7 can handle the output from a number of address filters 209. In the case of the ECMs, a much larger percent- 
age of the ECMs received with a program will be relevant to the receiver, and consequently, there is a one ECM reader 
219 for each ECM selector 21 1 , and that may also be the case with private reader 221 for private selector 213. 

The programs 233 used to program packet selection filters 205 and packet reading filters 207 are contained in 
secure memory 231 in smart card 225. As will be explained in more detail later, packet selection filters 205 will tend to 

40 be implemented in hardware and packet reading fitters 207 will tend to be implemented in software executed by the 
microprocessor that controls operation of the receiver. In the case of the filters in packet selection filters 205, the pro- 
grams specify values that either smart card 225 or the microprocessor writes to registers in the filter. The values in the 
registers indicate where the bytes to be selected are in the packet, define the match required by means of match data 
and a mask, and indicate whether the packet is to be passed to packet reading filters 207 if it matches or if it doesnl 

45 match. In the case of the filters in packet reading fitters 205, the program is a sequence of steps which specifies how a 
packet which has been passed to the reading filter is to be scanned and what data in the packet is to be read as packet 
contents 223 to smart card 225. 

Examples of Operation of the Invention: FIGs. 3 and 4 

50 

FIG. 3 shows ECMs and FIG. 4 shows EMMs as they are employed in a conditional access system designed by 
Scientific-Atlanta, Inc.. The following discussion will show how filter 201 may be used to select and read such ECMs 
and EMMs. 

Beginning with the ECMs of FIG. 3, FIG. 3 shows a PID stream 204 which contains the data from a CA-private sec- 
55 tion 301 , which contains conditional access information private to the entity providing the program with which the ECM 
is transmitted. CA-private section 301 consists of a header 303 which identifies it for what it is followed by a sequence 
of conditional access messages 305(0.^). each one of which has a CA-message header, a CA-ECM message 307, 
which contains the actual information in the ECM, and a message digest 309 which ensures that the contents of the 
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ECM have been correctly transmitted. CA-ECM message 307, finally, consists of a header and ECM-errtitiement-unrt- 
message 311, which contains an encrypted control word 313. As indicated above, sequences of ECMs accompany a 
broadcast and the content of the next ECM is of interest to smart card 225 only if it is different from that of the last ECM. 
The relevant content is contained in ECM-entitlement-unrt-message 311, which is in turn one of the inputs to digest 309. 

s The algorithm used to make digest 309 is chosen so that any change in ECM entitlement unit message 31 1 produces 
a change in digest 309. Consequently, ECM selection filter 21 1 for the ECM coidd simply compare digest 309 in the cur- 
rent ECM with the most recent value of that field and if they are different, pass the ECM to ECM reader 219. ECM reader 
will then read ECM-entitlement-unrt-message 311 and digest 309 from the ECM and output them to smart card 225, 
which will use digest 309 to check ECM-entrUement-unrt-message 31 Vs correctness and will use message 31 1 to pro- 

w vide a new decryption key or otherwise determine whether the receiver is still entitled to receive the program. 

FIG. 4 shows an EMM. Again, a PID stream 204 carries a sequence of CA message 305, each of which contains 
a message header 303, a CA-EMM message 402, and a digest 407 which as above serves to guarantee the correct- 
ness of the EMM's contents. CA-EMM message 402 is further made up of a header 401 and an EMM message 404, 
which itself contains a header 403 and EMM data 405, which contains the actual information transferred by the EMM. 

is With the EMM, the PID stream containing the EMM is fed to an EMM address filter 209(1) in packet selection filters 205. 
~ - -The address for which the EMM is intended is contained in a predetermined location in EMM header 403, and filter 
209(1) has been programmed to contain the address of the receiver in which filter 209(1) is implemented. Filter 209(1) 
obtains the address from the predetermined location in header 403 and compares it with the address of the receiver; if 
they are the same, the EMM is passed to EMM reader 21 7, which is programmed to scan the EMM for EMM inside data 

20 407 and digest 407 and provide them to smart card 225 fa use in altering the entitlement information contained in smart 
card 225. 

As will be apparent from the foregoing examples, filter system 201 is capable of both high-speed packet selection 
and sophisticated packet reacfing and can be progammed to handle any and all packets containing conditional access 
information. Set- top boxes employing filter system 201 are thus capable of dealing with conditional access information 

25 from any source. Moreover, the fact that the programs for fitter system 201 are contained in smart card 225 means that 
a standard set-top box can be "personalized" with regard to how it deals with conditional access information in exactly 
the same way that it is today with regard to subscriber information. That in turn means that the user no longer needs a 
new set-top box when he or she moves or desires to acquire the right to receive programs from another provider, but 
only needs that provider's smart card. Finally, because all program distribution systems can now use the same kind of 

30 set top box, competition, economies of scale, and the accompanying price reductions are available both to the user of 
the set top box and to the CATV or satellite broadcast provider. 

Detailed Specification of Filter System 201 

as Overview of the System 

Referring to Figure 2, we assume that transport packets 1 35 are from a MPEG/DVB compliant transport stream that 
uses any legal bitrate. The higher the brtrate the set top box is designed for, the more work that is required to meet the 
requirements of this filter model. 
40 We also assume that demultiplexer 203 exists as a standard mechanism in transport chips. This front end filter 
reduces an entire multiplex down to a set of PID streams 204. The PID streams produced by the f iter must have an 
average and burst data rate which meets the input specifications for the EMM and ECM filters. In order to meet the 
specification of each of the buffering models, we must also assume that the system which has encoded the packet 
stream for the program has created the individual PID streams so the input buffers do not overflow. This includes the 
45 first level buffers for packet selection filters 205, the second level buffers for packet reading filters 207, and the third level 
buffer inside smart card memory 231 . 

An important consideration for filtering is to allow flexfoility in formatting the data to meets the needs of a specific 
system. The known ways of providing EMMs and ECMs to a receiver include the following: 

so Having one EMM PID stream per multiplex, and one ECM PID stream per broadcast 
All EMMs, ECMs, and private data exist within one PID stream. 
Allowing multiple ECMs or EMMs to exist within one message packet. 

Separate ECMs for each PID stream of audio or video data, one common ECM for everything, or both. These 
ECMs could still exist in one PID stream. 
55 Multiple EMM PID streams which need to be merged and sent to the smart card. This is done to spread out the 
total EMM data rate over multiple PID streams. Fast data rates can be harder to generate than to receive. 
A totally private system which uses a private PID stream to provide control for all services on a transport The ECM 
and EMM PID streams are not used. Some private mechanism is used to find the PID stream. 
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For a lot of these scenarios, there are additional control structures within the CA_secfa'on used to locate the addi- 
tional information. For this reason, the filterable area must be moveable within the message packet If it is static, then 
only some scenarios can be implemented. Particularly, putting both ECMs and EMM in one PID stream would be diffi- 
cult. While one can make a CA system with a static filterable area, there are many reasons why the other scenarios set 
5 forth above are used. 

Another thing to note about the above list: Fitters for a number of the techniques on the list cannot be implemented 
by a single simple filter. This is why fitter 201 also includes packet reading filters 207. Packet reading fitters 207 have 
the additional job of packaging any ECMs, EMMs or private data streams before sending the data to the smart card. 
The two tier approach allows filter system 20 1 to be implemented with a moderate sized hardware filter for packet selec- 
w tion filters 205 and a flexible software fitter for packet reading filters 207 instead of implementing one large hardware 
filter. Of course, anyone may implement the entire filter of filter system 201 in either hardware or software as long as 
the fitter meets the requirements described below. 

Ttie Fitter Program 

is 

A filter program for fitter system 201 is a collection of packet selection fitters and at most one packet reading fDter : - 

There may be up to four filter programs defined. Each filter program is read out of the smart card as a file. Within the 
file are descriptors descrfring the incfividual filter elements. These descriptors are defined in detail later in this docu- 
ment. 

20 Each of the filter programs has a filter program number defined for it. Each filter program must have a unique filter 
number. This number also determines a priority for data being sent to smart card 225. The lower the number, the higher 
the priority. If two different programs have data available to be sent, the highest priority one is sent first For example, 
this allows critical ECM data to take priority over EMM data which could have buffered up a number of packets. With 
enough packets buffered, the ECM processing could be delayed long enough to miss a control word cycle. In most con- 

25 ditional access systems there will likely be two filter programs, one for ECMs and one for EMMs. The structure of the 
file for one fitter program 501 is given in FIG. 5 

Filter Number 503 

30 This 8 bit field identifies the number of the filter program for the packet reading fitter 207 that is to receive the output 
from the given packet selection fitter. There must be one filter program for each packet reading fitter to be used. There- 
fore, this field may have values from 0 to 3 in a preferred embodiment 

Filter Program Descriptors Length 

35 

This 8 bit field indicates the number of bytes following this field in the data structure. Not all packet selection filters 
may be used in one filter program, since each descriptor (see FIG. 7) uses up to 20 bytes of data for each of the 14 
packet selection fitters. 

40 Program Type 507 

The program type indicates the basic type of filter to be used. Refer to FIG.6 for the definitions for this field. Explicit 
program types allow for indirect PID mappings to be used. Also, explicit program types would ignore the PID field in the 
fitter descriptor (FIG. 7). 

45 

Addithnal Information on Program type: FIG. 6 

For a program type zero, the PID stream 204 from which a packet selection fitter receives message packets is 
explicitly defined for EMM or ECM filter. If program type 0 is used, then PID remapping can be a problem. The PID 
so assignments must be determined by some private means, which could be in a private data stream. An implicit PID map- 
ping is usually preferred. 

For a program type one, if more than one EMM PID stream is specified in the CAT for the CA_system_id specified, 
then each EMM fitter 209 is specified in one-for-one order. The first EMM filter 209(0) read from the smart card applies 
to the first matching CAjdescriptor in the CAT. The second EMM fitter 209(1) applies to the second matching CA- 
55 descriptor. This continues until there are no more EMM fitters, or no more CAjdescriptors, whichever comes first. This 
assumes the CA provider has control over how the CAT is formatted, or that all EMM PID streams use identical filters. 

For program type two, we can find the ECM PID by inspecting the CA_descriptor in the first loop of the PMT. If there 
are multiple CAjdescriptors with a matching CA_sys1em_ids, then we assume there are also multiple filters defined. 
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ECM fitters 21 1 are matched to ECM PID streams as explained above for EMMs. 

For program type three, we expect to find a single ECM per elementary stream. Each ECM is found by finding a 
CAjdescriptor with a matching CA_system_id. If there are multiple matching descriptors per elementary stream, then 
the mapping rule as explained for EMMs will apply. 
5 In addition, for program type three, there are two ways that filters could be handled. 

1 . All ECMs are filtered and sent in the order they are received. 

2. Each broadcast's ECMs are filtered individually. 

io In case 1 , all f flters 21 1 are set up and apply simultaneously. This is the reason for allowing 6 ECM filters 21 1 to exist. 
In case 2, only one filter 21 1 would be used. The smart card would then change filter 21 1 each time it passes a new 
ECM so that the filter will pass the next new ECM. This assumes that all of the ECMs are on the same PID stream, but 
are in different message packets. 

A conditional access system that filters a broadcast's ECMs individually may have problems with timing control 

is word changes. In the conditional access arts, the time between new ECMs is termed a crypto-cycle. In general, the 

• - shorter the crypto-cycle time, the harder it is for a pirate to decrypt the control word; the longer the crypto-cycle time, 

the better the encryption of the control word needs to be. A crypto-cycle cannot however, be shorter than the time it 
takes the smart card to reprogram the ECM filter 21 1 to look for the next new ECM. The crypto-cycle can become very 
long if each PID stream for a broadcast's audio and video has its own individual ECM. These timing problems must be 

20 solved with mechanisms that are private to the conditional access system. 

EMM Filter Mechanism 

Basic Assumptions 

25 

The packet selection portion 209 of the filter described in this section requires a hardware implementation at 
present The implementation could also be in software, or in some combination of hardware and software as long as 
the data rates and buffer model described below are satisfied. The intended use of the EMM filter is to reduce the data 
rate of EMMs to a rate which can be processed by a smart card. Since EMMs are generally addressed to individual 
30 receivers, it can take a long time to cycle through all receivers. The higher the rate, the faster all receivers can updated. 
On the other hand, any one receiver needs to only seethe EMMs addressed to it and should ignore all other EMMs. 

Some systems require grouped messages, where one EMM is sent to many receivers simultaneously. In some 
cases, the message may be global, and is addressed to every receiver listening to the broadcast. The address used in 
these cases is different from the individual address, so it becomes necessary to allow two or three different EMM fitters 
35 to apply to the same message packet This will have design implications, especially if the filter is implemented in soft- 
ware. Generally, a microprocessor cannot do two things at once. We will specify that any implementation must be able 
to handle at least three filters attached to one PID stream with the same table_id. If any filter inticates 'save', then the 
message packet is passed to the low speed filter. 

The MPEG model points to the EMM stream using a CAjdescriptorO contained in the CAT. While a typical system 
40 would implement a single EMM stream, the model does allow multiple streams using multiple CAjdescriptors. If multi- 
ple EMM streams are fltered simultaneously, the resulting output must still fit within the buffer model. All EMM message 
packets must use the DVB CA_section format to carry EMMs. 

The EMM filters can also be used for high speed private data. In fact the receiver does not even need to know the 
distinction, as long as the fftter conditions are met The private data must follow the MPEG private_section format This 
45 is the same as the CA_section, so these two uses remain indistinguishable, except for the PID stream the private data 
is carried on, and how the PID stream is located. 

To accommodate both, we require at least 8 packet selection filters to be available to the smart card. The maximum 
input rate for each PID stream is a minimum of 2 Mbits/sec. Therefore, the total input rate could be as high as 16 Mbps. 
The burst rate should be able to accommodate two transport packets back-to-back, but the average rate must not cver- 
so flow the input FIFO. Refer to the section The EMM Buffering Model below for exact specifications. Refer to Figure 2 for 
a an overview of fflter system 201 . 

The EMM Buffering Model 

55 The buffering model specifies the input data rate and buffer size, and also the expected output rate. In this first level, 
the EMM, ECM, and private data fitters all share the resources of the receiver. As a result, each of these elements 
needs to be assigned priorities to allow important data to get through quickly, or for fast data to be emptied before the 
buffers overflew. 
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In general, all data going through this filter is in MPEG private message packets, so the filter buffers will be based 
upon this basic unit. ECM and EMM CA_sections are specifically limited to 256 bytes by the DVB, but private message 
packets may be up to 4096 bytes. Since we are assuming all private message packets are being filtered for private CA 
use, it is reasonable to limit the private data to 1 024 bytes. Packet reading filters 207 can reduce this to a size the smart 
5 card can handle. 

The minimum message packet size is not specified by DVB. We expect most ECM or EMM packets to be quite 
small. There could be multiple message packets in one transport packet The filter must be able to process all message 
packets within a transport packet The only exception to this rule is that the filterable area must exist entirely within one 
transport packet The encoding system must be careful when formatting all filtered data. The receiver response to filter 
w data split across transport packets is undefined. 

The input data rate to the EMM fitter should be at least 1500 transport packets per second, about 2.2 Mbps. The 
output data rate should be 1 message packet every 1 0OmS. Since a message packet could be up to 1 024 bytes, this is 
approximately 82 Kbps. In specifying the buffer as being 1024 bytes long, care must be taken wfth timing when format- 
ting message packets. If sections are greater than 51 2 bytes, the packets may need to be spaced by 200mS to guaran- 
15 tee that the buffer is emptied completely before the next message packet arrives. For smaller message packets, the 
number -of back-to-back message packets needs to be controlled. — - 

The Model for niters in Packet Selection Filters 205 

20 Each filter in packet selection fftters 205 consists of a number of pieces: 

The filter data, 7 bytes long. 
The filter mask, 7 bytes long. 
The filter offset 1 byte defined with values 0 to 31 . 
25 The PID stream to filter on, specified directly or indirectly. 

The Table_ld to fitter on, plus a method to disable this filter. 

The output buffer index, which specifies the FIFO to store data saved by the filter into 
Save/discard flag. 

30 The filter data incficates the bit by bit state to match within message packet. The mask indicates those bits which 
are donl care. The offset indicates the point at which the fitter data and mask are to be applied within the message 
packet The PID indicates the PID stream that the input to the fitter should be connected to The output buffer index indi- 
cates the FIFO in which contents from any message packet which is selected by the packet selection fflter will be stored. 
The save/discard flag incficates whether the data should be saved or discarded on a match. 

35 

The Rlter Description 

The filter itself is seven bytes long, for both the data and the mask. Each bit of the mask corresponds to one bit of 
the data. 
40 Let 

Data be 56 bits of input data starting at the offset specified. 
Filter be a set of 56 bits of matching data. 
Mask be a set of 56 bits controlling donl care data. 
45 Flag be a single bit controlling when the result is sent to the next filter. 

is a bitwise Exciusive-OR function. 
& is a bitwise AND function. 
| is a bitwise OR function. 
so - is a bitwise one's complement function, 
is a bitwise multiply function. 

The filter equation: 

55 Result = ((Data Filter) & Mask) 

If Flag is set, Data is saved when Result is zero. 

If Flag is clear, Data is saved when Result is non-zero. 



9 



Best Available Copy 



EP 0 893 921 A1 

The Descriptor for a Packet Selection Filter : FIG. 7 

The descriptor 701 for a packet selection filter in FIG. 7 is used as part of the filter program fOe read from the smart 
card. There is one descriptor per packet selection filter to be controlled. Multiple packet selection fitters can be assigned 
5 to one filter program. 

Save Flag 703 

When set, this flag indicates that the message packet matching the filter (result is zero) should be saved in the out- 
10 put FIFO. When clear, the message packet matching the filter should be discarded. 

Filter Offset 705 

This is the number of bytes into the message packet that the filter matching process should start A value of zero 
is indicates the match should start at the fourth byte into the message packet - immediately after the message 
packetjength field in the CA^section* ~ - - - — - - - — - 

Filter Length 711 

20 This field gives the number of bytes defined for this filter. The receiver's filter is always seven bytes long. The rule 
for converting requested titers of less than seven bytes is: 

1 . Start Bit 0 of the requested fitter at Bit 0 of the receiver filter 

2. Fill the unused data with zero, (Actually, it is don't care) 

25 3. Fill the unused mask data with zero. This disables these bits from being used. „ 

Table id Data 707 

This is the data to use in matching the tablejd (Byte 0) in the CA_section. 

30 

Table Id Mask 709 

This is the mask to use in matching the tablejd. The mask may be useful for ignoring the toggle bit for ECMs, or 
for totally dsabling the tablejd filter. 

35 

Datafil 713 

Up to seven bytes of data used to match CA_section payload data. 
40 Maskfi] 715 

Up to seven bytes of data used to match unused bits of the filter. The mask must be exactly the same length as the 
data. 

45 ECM niter Mechanism 

Basic Assumptions 

The filter 211(1) described in this section can be implemented in ASIC firmware. The characteristics of the fitter are 
so chosen to be identical to an address filter 209(1). A typical ECM PID stream provides ECMs at a much lower rate than 
an EMM PID stream provides EMMs. In a flexible system, we must consider a worst case. If all ECMs for all services 
and all streams were placed in one PID stream, then the rate would rival that of the EMM PID stream, as shown below. 
Some systems may also choose to combine the ECM and EMM PID streams into one PID stream, which then makes 
the two filters equivalent and the rate up to twice as fast. 
55 The PID for the ECM PID stream is determined from information in a CAjdescriptorO within the PMT. There may 
be one or more CA_descriptors in the programjoop and one or more CA_descriptors per elementary stream in the 
service_loop. Regardless of where they are located, we will allow up to 6 ECM fitters 21 1 , on the assumption that there 
is at most one ECM per PID stream, and up to 6 PID streams per service. All ECM message packets must follow the 
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DVB CA_section format. This is the same format as for EMMs. 

ECM fitters 21 1 may also be used for private data. All private data must follow the MPEG private message packet 
format, which is also the same as the CA_section. Therefore, the same fitter may be used. The only differences are the 
PID stream the message packets are carried on and the method of determining the PID for the stream. Refer to the sec- 
5 tion The ECM Buffering Model below for exact specifications. Refer to FIG. 2 to see the general structure of fitter system 
201. 

The ECM Buffering Model 

10 An ECM message packet has an upper limit of 256 bytes, as defined by the DVB. While private message packets 
could go has high as 4096 bytes, we recommend an upper limit of 1024 bytes, the same as for the EMM fitter. The dif- 
ference is in the data rate of the ECM PID stream. The ECM is broadcast to all receivers, so the ECM needs only to be 
sent fast enough to acquire a signal in a reasonable time. In a Simulcrypt system, there can be many conditional access 
systems, but the conditional access information for each of the systems must be on a different PID stream Further, a 

75 conditional access system may choose to provide a separate PID stream for each of the sequences of ECMs associ- 

— ated with a broadcast The worst case is when the ECMs for all of the broadcasts carried on the channel are sent in one 
PID stream. This worst case is used for the following rate calculations. 

Assume 1 0 ECMs per second (maximum rate) per broadcast Some systems could choose to have different ECMs 
for even and odd controls words. Some systems could choose to have a different ECM for each audio or video PID 

20 stream, if we assume 1 0 unique broadcasts with 6 streams each, then the input rate of ECM packets per second is: 

rate = 10 ECMfe * 2 CW * 10 services * 6 streams 
= 1200 message packets per second. 

25 The output would be 10 ECMfe, 1 CW, 1 service, 6 streams. This amounts to a worst case of 60 message packets 
a second. 

Another consideration is that most of the ECMs are actually duplicates. Smart card 225 need deal with an ECM only 
when there has been a change from the previous ECM, typically because the control word in the ECM has changed. 
The time between changes ranges from a sub-second to 1 0 seconds or longer, ft is the task of EMM fitter 21 1 to detect 
30 the change in the ECM and pass the ECM to ECM reader 219, which then locates the part that has changed and pro- 
vides it to smart card 225. 

The Differences Between ECM Filters 211 and EMM Fitters 209 

35 A shown, the PID streams for both ECMs and EMMs can have similar data rates. There are differences in what data 
needs to be filtered. This section will show how the same fitter programming techniques can be used to fitter both ECMs 
and EMMs. 

The focus of EMM filtering in filter 209 is to match the identity of the receiver to the field in the EMM which indicates 
the destination of the EMM. This is a straightforward " ma tch these bytes and save the message packer process. In 

40 many cases, the EMM's destination will be indicated by a 4-byte IP address. Other systems may use longer or shorter 
addresses. A fitter 211 which can fitter on 7 bytes is employed in a preferred embodiment and should be long enough 
to cover all eventualities. The EMM fitters are generally static, as the address of a receiver does not change often. All 
EMMs addressed to the receiver must be saved and processed by the secure element 

Filtering ECMs is not so straight forward. In the DVB, each time an ECM changes, a value called the tablejd tog- 

45 gles. Thus, filter 211 need fitter only on the tablejd. When the table-id toggles, the ECM containing the changed 
tablejd is sent to ECM reader 219 and fitter 211 is set to fitter to the other value of tablejd. The problem with this tech- 
nique is that the filter examines only the first ECM transmitted on each change. In a noisy environment, this could be a 
bad packet There needs to be a mechanism to get or discard repeated packets. Other systems may find the toggling 
to be limiting, and will place private indicators such as sequence numbers into the data for better control. A fitter 21 1 

so needs to be able to handle this data. The ECM filters 21 1 are consequently not static but must change at least as often 
as the control word changes. When smart card 225 receives an ECM, it must reprogram the ECM filter 21 1 as required 
by the contents of the received ECM. 

Details of Packet Reading Fitters 207 

55 

Basic Assumptions 

A packet reading fflter is used following either a group of EMM filters 209 or an ECM filter 21 1 to read any selected 
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message packet 108 and feed relevant parts of its content to smart card 225. Since the data received is proprietary, 
there is no way of predicting hew the data is formatted, or how smart card 225 expects the data to be received. For 
example, one could imagine that multiple EMMs might be carried in one message packet 108 to enable efficient map- 
ping of message packets 108 to transport packets 107. A typical smart card cannot handle a full 184 bytes of data at 
5 once, so to deal with this case, the packet reading fitter provides a mechanism for parceling of data to the smart card in 
smaller pieces. A similar problem could exist in the ECM, where information for multiple broadcast is carried in one ECM 
message packet The smart card would only want to see the one ECM explicitly required for the broadcast the user 
wishes to receive. 

Since we assume the multiple ECMs or EMMs can be in the same message packet and we assume that the ECMs 
io and EMMs can be in the same PID stream, there is also a need to accommodate the header information used to differ- 
entiate the various pieces. 

The focus for filtering EMMs is again different than that for ECMs, so multiple packet reading filters are required. Up 
to four fitters may be specified. At least one must be specified in order to provide the buffering required to send message 
packets to the smart card. 

is Each packet reading fitter also provides an input FIFO to buffer the data the filter receives from its corresponding 

packet selection fitter. There is an output FIFO to buffer the ECM, EMM, or private data before being sent to the smart 

card. A priority is applied to each output FIFO to aJIcw critical ECM data to reach the smart card before non-critical data. 
The output of all packet reading filters 207 is sent to the smart card in priority order. Refer to the section Low Speed 
Buffering Model which follows for exact specifications. Refer to Figure 2 for an overview of the entire filtering system 
20 201. 

Low Speed Buffering Model 

The Input FIFO 

25 

The input FIFO is 1 024 bytes long. The packet selection fitters preceding the packet reading filter to which the input 
FIFO belongs pass any selected message packet to the input FIFO. The entire selected message packet must be writ- 
ten to the FIFO, to keep the data in the message packet intact The transmission site is responsible for ensuring that 
message packets are spaced so that the FIFOs do not overflow. It is assumed that this transmission site knows the 
30 characteristics for its own conditional access system, such as how the fitters are set up and how fast the data can be 
processed. A packet that cannot fit in the FIFO will be discarded. 

The Output FIFO 

35 The output FIFO holds the data passed by this packet reading fitter. Each FIFO is assigned a unique priority 
according to the number of the fitter program to which the FIFO belongs. Fitter program number 0 has the highest pri- 
ority. When the smart card is ready to accept new data, the data at the head of the highest priority FIFO that contains 
data is sent to the smart card. It is assumed that the transmission site will space out the various types message packets 
so that higher-priority FIFOs will become empty and thereby permit the smart card to receive data from lower-priority 

40 FIFOs. 

The Rlter Model 

Filter Characteristics 

45 

The packet reading filters need to have the following properties: 
The fitter should be reducible to a simple FIFO function. 

The fitter should be able to execute like a macro language to handle structures like sequence numbers. 
so The fitter should be able to match certain fields for certain values. 

The fitter should be able to save or discard based upon various combinations. 
There should be an ability to apply logical constructs such as AND, OR, and NOT 
The fitter should be able to skip over fields. 

The fitter should be able to use length fields for saving or discarding partial packets. 

55 

Filter Elements 

The low speed filter is used to scan a message packet The filter starts at bit 0, which is the most significant bit of 
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the first byte of the message packet (tablejd). A bit pointer needs to be maintained, and is used as the starling point 
for each fitter element. 

There is a 4 bit stack to maintain the results of the logical operations, using RPN notation. The opcode generally 
uses the least significant 2 bits to indicate the register to use for the command. The exception is the ADD command 
5 which encodes the two registers in the operand. 

Specifying Packet Read ne niters 

Each filter program includes exactly one descriptor for a packet reading filter. This is included in the f fle along with 
10 multiple packet selection fitter descriptors to make a complete filter. If there is no low speed filter defined, then one 
assumes that all of the data from the packet selection fitters is output to one output FIFO before being sent to the smart 
card. Otherwise, the lower the filter prog-am number, the higher the priority for data being sent to the smart card. The 
low-speed fitter descriptor 1101 is shown in FIG. 1 1 . Its components are as follows: 

is Descriptor Taa 1103 



This field identifies the type of data in this structure. 

Descriptor Length 1105 

20 

This field gives total number of bytes immediately following this field. The maximum value is 254, giving a total 
descriptor length of 256 bytes. 

Opcode 1107 

25 

This is a set of one, two or three byte commands as detailed in FIQs. 8A and 8B. Each command contains 1 opcode 
followed by 0, 1 or 2 operands. 

Implementation of a Packet Selection Filter: FIG. 10 

30 

FIG. 10 shows an implementation 1001 of a single packet selection filter in an ASIC. The implementation consists 
of a group of registers for holding the message packet to be filtered, the value that indicates where the filter is to be 
applied to the message packet, the titer data and mask data that control the filtering, and the result of the filtering oper- 
ation, togethr with and logic operators for performing bitwise logic operations on the portion of the message packet to 

35 be filtered, the fBter data, and the mask data. Beginning with message packet buffer 1003, buffer 1003 contains an 
entire message packet 108 from the PID stream 204 to which the filter is connected. The contents of buffer 1003 are 
output via multiplexer 1005 either to the input FIFO belonging to the packet reading filter associated with the packet 
selection filter (output 1009) or to the registers of the packet selection fflter (output 101 1). The contents of buffer 1003 
are first output to the registers of the packet selection filter and then output to the FIFO if the filter selects the message 

40 packet, as shewn by save signal 1007 controlling MUX 1005. 

Output 1011 goes to shift register 1013, which is large enough to hold the entire message packet. As previously 
explained, a packet selection filter examines 7 bytes of data beginning at a location in the packet that is specified by 
filter offset 705 in fflter descriptor 701 for the packet selection filter. In implementation 1001, the offset value has been 
loaded into offset register 1015 and controls shift register 1013 so that the 7 bytes of data to be examined are shifted 

45 into bytes 0-6 1 01 7 of shift register 1 01 3. Rom there it is output to data register 1019. Register 1 021 is the filter register. 
It has been set to the 7-byte filter value specified at 713 in descriptor 701 . The contents of data register 1019 and filter 
register 1021 are exclusively ORed together, as indicated by XOR logic 1023. The operation is bitwise, and the result 
has a "1" bit wherever either the data register or the fitter register has a "1" bit and an "0" bit wherever both the data 
register and the fBter register have a "1" bit or an "0" bit. A perfect match between the value in data register 1019 and 

so the value in fitter register 1021 thus will result in a 7-byte string of *X)'s". The output of XOR logic 1 023 goes to AND logic 
1 027. There it is ANDed with the contents of the 7-byte mask register 1 025. The mask defines certain bits of the data 
register as "don't care" bits, i.a, bits that do not affect whether a match is found. It does so simply by setting the corre- 
sponding bits in the mask to "0" and the remaining bits to T. Where a bit of the mask is set to "1", the result of the AND 
operation will be "0" only if the corresponding bit of the result of the XOR operation has the value "0"; where a bit of the 

55 mask is set to "0", the result of the AND operation will be "0" regardless of the value of the corresponding bit of the result 
of the XOR operation. 

The result output by AND operation 1027 goes to result logic 1029, which is controlled by the value in flag register 
1 031 . Rag register 1 031 is set from savej lag 703 in descriptor 701 . When register 1 031 has the value "1 result logic 
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1 029 generates save signal 1 007 when the result of the AND operation is "0", i.e., when the contents of the data register 
matches the contents of the fitter register as masked by the contents of the mask register. When register 1 031 has the 
value "0", result logic 1029 generates save signal 1007 when the result of the AND operation is not "0", indicating no 
match. 

5 

Implementation of a Packet Reading Filter: FIG. 12 

FIG. 12 shows how packet reading filters 207 can be implemented in a conditional access system 1 201 that is con- 
trolled by a microprocessor 1207. Microprocessor 1201 is connected to a bus 121 1 , to which memory 1213, decrypt er 

10 1203, packet selection fitter ASIC 1205. and smart card 225 are also connected. By means of bus 1211, microproces- 
sor 1207 can transfer data between memory 1213 and the other devices connected to bus 121 1. High-speed devices 
such as decrypter 1203 and ASIC 1205 may additionally have direct memory access (DMA) to memory 1213 via bus 
121 1 . Smart card interface 1209 gives microprocessor 1207 and smart card 225 the capability of exchanging data, but 
does not give microprocessor 1 207 direct access to smart card memory 231 . 

75 As previously mentioned, each fitter program (0..n) in filter system 201 must include a packet reading filter. A given 
filter program (i) includes the following corrponentsin memory 1213: -- — - 

packet reading fitter code 12159(0. the code executed by microprocessor 1207 when it is implementing the packet 
reading filter belonging to filter program®; 
20 input FIF0 1 21 7(i), which receives message packets 1 08 selected by filter program 501(i)'s filter selection f ater and 
stores them for processing by the packet reading filter 

output FIFO 1219(0, which receives the results when the packet reading filter processes a message packet and 
stores the results for transfer to smart card 225; and 

per-packet reading filter data 1221(i), which is the data required for microprocessor 1 21 3 to be able to execute code 
25 1 21 5(i). This data includes: 

- bit pointer 1225 which points to the first bit of the first byte of the message packet at the head of IFIF0 1 21 7(i) 
which immediately follows the last bit of the message packet at the head to be output for processing by the 
packet reacting filter; 

30 - result stack 1227, which is a four-bit stack of elements RSR 1229(0.-3) for storing the results of logical opera- 
tions; and 

- data registers 1231, which contains four 16-bit registers DR (0..3) into which bytes are read from the head of 
IFIF0 1217(0 and from which bytes are written to the tail of OFIF0 1219(0* 

35 Packet reacting filter code 1215 for each packet reacting fitter is of course written from smart card memory 231 to 
memory 1213 before the packet reacting titer begins operation. Since smart card 225 is made for the CATV or satellite 
TV service provider, filter programs 233 in most implementations will consist of code which can be directly executed by 
microprocessor 1207. This code will have been compiled by the service provider from the description of the packet 
reading filter. In other embodiments, however, a fflter program 233 may be a character file that directly represents a filter 

40 program 501 . In this case, memory 1213 will include either a compiler for compiling the character file to produce exe- 
cutable code or an interpreter which interprets the program in the character file to produce equivalent instructions exe- 
cutable by microprocessor 1207.. 

Continuing with the hardware components of filter system 201 , the stream of transport packets 107 which contain 
the broadcast desired by the user of the receiver enters the system at 1 35. Demultiplexer 203 divides it into its constrt- 

45 uent PID streams 204. The PID streams 204 that contain the audio and video data go directly to decrypter 203; the PID 
streams 204 that contain conditional access information go to packet selection filter ASIC 1205. which implements the 
packet selection fitter parts of fitter system 201. Message packets 108 passed by packet selection filter 205(i) of filter 
program 501(i) are written to the tail of I FIF0 1217(0- Microprocessor 1207 executes packet reading fitter code 121 5(i) 
for fitter program 501(0 to read the relevant parts of the message packets and write them to the tail of OFIFO 1219(0- 

so Meanwhile, smart card 225 reads data from the head of OFIF0 1219(0 and performs the actions required by the con- 
tents of message packet 108. In the case of an EMM message packet 108, smart card 225 will update its entitlement 
information; in the case of an ECM message packet 108, the smart card will determine whether the user of the receiver 
is entitled to access the desired program, and if the user is so entitled, will provide a key to decrypt the program to 
decrypter 1203. 

55 To give a concrete example using the EMM shown in FIG. 4, the destination of the EMM is specified by an address 
in EMM HDR 403; consequently, the program for EMM packet selection fitter 209(i) for PID stream 204(0 carrying the 
EMMs must set savej lag 703 to indicate that the EMM is to be passed if its address matches the address of the 
receiver (in data 713), fitterjoffset 705 must indicate the offset of the address from the beginning of the message 
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packet, PID 706 may in a type 0 program specify the PID of the PID stream carrying the EMMS, fitter-length 71 1 is set 
to the length of the address, and mask 71 5 is set to all" 1 's**, since an exact match is sought. 

When an EMM addressed to the receiver has been selected by EMM packet selection filter 209(i). filter 209(i) 
places it at the tail of FIF0 121 7(i). When the EMM reaches the head of FIF0 1217, it is processed by packet reading 
filter 1211(i). In EMMs like the one shown in FIG. 4, the contents that are of interest to smart card 225 are EMM data 
405 and digest 407. Accordingly, filter descriptor 1 101 for packet reading filter 121 1(0 specifies a program which first 
initializes data registers 1 233© and (k) and the top of result stack 1 227 by using the STB instruction (FIG. 8) to initialize 
data register 12330) to specify the number of bytes in EMM data 405 and data register 1233(k) to a larger value and 
then uses the CMP operation with register 1 233(j) < register 1 233(k) to set the value at the top of stack 1 227 to "V. The 
initialization done, the program uses the Skip instruction to set bit pointer 1225 so that it points to the beginning of EMM 
data 405. Then it uses the Output instruction to output EMM data 405 to the tail of OFFO 1214(i). Next, the program 
again uses STB to set data register 1233Q) to specify the number of bytes in digest 407 and the Output instruction to 
output digest 407 to the tail of OFF0 1 21 4(i). While this is going on, smart card 225 is reading from the head of OFFO 
1214(i) and updating its entitlement information as indicated by the data from the EMMs contained in OFFO 1214(i). 
This is of course a simple example; it will, however, be immediately apparent to those skilled in the programming arts 
how the instructions of FIGs. 8A and 8B may be used to process message packets 108 of arbitrary complexity. - 

Conclusion 

The foregoing Detailed Description has disclosed to those skilled in the relevant arts how to make and use a two- 
level programmable filter to filter conditional access information from message packets received in PID streams. Pro- 
grammable filters such as the one disclosed herein make it possWe for providers of CATV and satellite TV broadcasts 
to implement their proprietary corxfitional access systems in standard receiver hardware and thereby make it possible 
for both the providers and their customers to obtain the advantages of standardized receivers while retaining the advan- 
tages of proprietary conditional access systems. 

While the Detailed Description has disclosed the best mode of implementing his two-level programmable filter pres- 
ently known to the inventor, it will be immediately apparent to those skilled in the relevant arts that many other imple- 
mentations that employ the principles of the invention are possible. For example, the fitter programs could be 
downloaded to the receivers from the broadcast providers, instead of being downloaded from smart cards. Further, dif- 
ferent languages may be used to descrfee the filters and different fitter implementations may be employed from those 
described herein. 

For the foregoing reasons, the Detailed Description is to be regarded as being in all respects exemplary and not 
restrictive, and the breadth of the invention disclosed herein is to be determined not from the Detailed Description, but 
rather from the claims as interpreted with the full breadth permitted by the patent laws. 

Claims 

1 . Apparatus for filtering first packets containing conditional access information from a stream of packets received in 
a receiver, the apparatus comprising: 

a first fitter for selecting the first packets from the stream in response to first information in the packets; 

a second filter for receiving the selected packets, reading predetermined portions therefrom, and outputting the 

read portions; and 

conditional access apparatus for receiving the read portions and using the read portions to determine access 
by the receiver to second packets in the stream. 

2. The apparatus set forth in claim 1 further comprising: 

programming apparatus for programming the first filter to select the first packets and the second filter to read 
the predetermined portions according to a stored program. 

3. The apparatus set forth in claim 2 wherein: 

the conditional access apparatus contains the stored program and provides the stored program to the pro- 
gramming apparatus. 

4. The apparatus set forth in claim 1 wherein: 
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the conditional access apparatus is a secure element 
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